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ABSTRACT 

Future  battlefield  networks  will  involve  thousands  of 
heterogeneous  nodes  operating  under  rapidly  changing 
connectivity,  and  resource  (bandwidth,  energy, 
computation,  etc.)  constraints.  Mobile  Ad-hoc  networks 
(MANET)  form  the  basis  for  current  and  future  military 
networks.  Trust  and  trust  establishment  among 
communicating  nodes  (soldiers,  vehicles,  UAVs, 
satellites)  and  sensor  nodes  is  the  absolutely  starting 
point  for  establishing  any  such  network.  The  network 
management  system  needs  to  frequently  validate  trust, 
frequently  defend  against  attacks,  quickly  isolate 
compromised  nodes,  and  quickly  establish  trust  in 
dynamically  collaborating  group  (topology  changes).  In 
this  paper  we  provide  our  solution  to  the  problem  of 
establishing  and  maintaining  trust  relations  within  a 
MANET,  in  a  maimer  that  satisfies  both  the  dynamic  and 
distributed  constraints  of  the  problem. 

1.  INTRODUCTION 

Due  to  the  absence  of  infrastructure,  vulnerability  of 
wireless  links  and  changes  in  topology,  MANET  poses 
several  formidable  challenges  for  networking  control, 
monitoring  and  management.  The  essential  and  unique 
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properties  of  trust  management  in  this  new  paradigm  of 
wireless  networking,  as  opposed  to  traditional  centralized 
approaches  are:  (1)  Uncertainty  of  trust  value.  Trust 
value  is  represented  as  subject  probability  ranging  from  0 
to  1;  (2)  Locality  in  trust  information  exchange;  (3) 
Distributed  computation. 

The  mam  ingredients  of  our  innovative  solution  are: 
(i)  An  efficient,  resilient,  distributed  scheme  for 
distributing  trust  evidence  documents;  (ii)  A  distributed 
scheme  for  “spreading”  trust  to  validated  nodes;  (iii)  A 
new  concept  of  topology  control  that  helps  trust 
propagation  (speed)  and  minimizes  resources  (number  of 
links  and  bandwidth);  (iv)  Fundamental  analytical  results, 
backing  experimental  evidence  of  performance,  based  on 
techniques  from  mathematical  physics  of  spin  glasses 
and  phase  transitions  and  on  the  mathematics  of  dynamic 
cooperative  games  on  graphs.  Within  (i),  our  earlier  work 
on  swarm-intelligence  based  trust  document  distribution 
schemes  (Jiang  et  al„  2004),  shows  its  major  advantages 
and  performance  in  MANETs.  This  paper  is  focused  on 
our  results  within  (ii)-(iv).  Our  goal  is  to  build  a  trust 
computation  model  based  only  on  local  interactions,  and 
to  investigate  the  global  effects  of  these  interactions.  We 
demonstrate  how  phase  transitions  (in  this  case  they 
mean  node  transitions  from  non-trusted  to  trusted)  can 
appear  within  a  MANET.  We  link  the  existence  and 
analysis  of  such  phase  transitions  to  dynamic  cooperative 
games.  The  cooperative  game  framework  we  develop  is 
useful  for  investigating  other  emergent  properties  of 
MANET:  route  connectivity,  security,  resource 

allocation. 
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2.  GAME-BASED  MODEL 


The  network  is  modeled  as  an  undirected  graph 
G(V,  E),  where  V  is  the  set  of  nodes,  and  E  is  the  set  of 
links.  This  is  the  physical  model  of  the  network.  We  are 
primarily  interested  in  tire  logical  model  of  tire  network 
that  models  the  logical  relation  of  trust.  Thus  we  also 
consider  tire  Trust  Graph:  GT(VT,  Ej),  where  VT  is  tire 
set  of  “trusted”  nodes,  a  subset  of  V.  GT  is  the  induced 
(by  VT)  subgraph  of  G(V,  E).  Here  Z?T  =  \e  I  e  in  both 
ends  of  e  in  VT } .  Our  distributed  trust  computation  model 
is  based  on  local  policies  (i.e.  extensions  of  voting 
methods),  which  are  rules  that  govern  tire  collective 
decision  of  legitimate  neighbors  of  a  node  regarding  the 
trustworthiness  (i.e.  trust  value)  of  the  node.  Agents  are 
self-interested,  and  usually  face  a  frustrated  interaction. 
Normally  outcomes  without  cooperation  are  worse  than 
those  with  cooperation.  Thus,  it  is  desirable  to  analyze 
rules  that  force  all  entities  to  cooperate.  These  aspects  are 
analogous  to  the  statistical  mechanics  of  complex 
systems  with  game  theoretic  interpretations. 


Inspiration  for  our  analytical  methods  comes  from 
the  Ising  model  in  physics  (Kindermann  et  ah,  1998). 
The  Ising  model  describes  the  interaction  of  magnetic 
moments  or  spins,  where  some  spins  seek  to  align 
(ferromagnetism),  while  others  try  to  anti-align 
(antiferromagnetism).  Each  spin  is  either  in  position  “up” 
or  “down”.  In  the  Ising  model,  spurs  aim  to  minimize  the 
Hamiltonian  by  only  local  alignment  interactions. 
Inspired  by  the  Ising  model,  we  develop  an  interesting 
cooperative  game,  where  nodes  in  the  network 
correspond  to  spins  and  all  nodes  only  interact  with  their 
neighbors.  Let  us  assume  nodes  can  only  choose  their 
strategies  from  two  candidates  which  are  denoted 
by  Sj  £  {—1,1}  ,  and  define  the  payoff  matrix 
Y  el“  and  y..  =  (J..  /T)siSj  .  Then  the  payoff 


matrix  Y  defines  the  characteristic  function  of  co¬ 
operative  games  V  '.2^  — >  1R. ,  and  V  coalition  5  (Z  N  , 


Then  we  get  a  formal  'jj^operatji^  game  F  =  (N  ,v)  , 
where  each  player  aims  to  maximize  their  payoffs.  We 
investigate  coalition  construction  and  the  dynamics  of 
coalition  formation.  We  also  find  the  conditions  for  the 


existence  of  a  nonempty  core  for  this  trust  cooperative 
game;  i.e.  which  forces  all  the  agents  to  cooperate  to 
form  a  grand  coalition.  One  interesting  phenomenon  in 
the  Ising  model  is  phase  transitions.  We  find  that  phase 
transitions  occur  in  the  distributed  trust  models  proposed 
here  and  analyze  the  scheme  parameters  controlling  these 
phase  transitions. 


3.  ANALYSIS 

We  analyze  the  effects  of  local  interactions  on  global 
features  and  dynamics  of  the  system.  One  of  the  most 
important  properties  is  the  existence  of  trusted  paths  (i.e. 
paths  where  all  nodes  are  trusted)  between  trusted 
sources  and  destinations  (Capkun  et  al.,  2003).  We 
analyze  trust  dynamics  within  a  MANET,  i.e.  how  trust 
spreads  and/or  is  revoked  between  nodes.  Trust  dynamics 
are  caused  in  MANET  by  node  mobility,  faulty  nodes, 
compromised  nodes,  membership  changes,  topology 
changes,  trusted  path  changes,  changes  in  the  referees  for 
a  node,  changes  in  trust  evidence  for  a  node.  We 
investigate  and  answer  questions  such  as:  Does  trust 
spread  to  a  maximum  set  of  nodes?  What  parameters 
speed  up  or  slow  down  this  transition?  We  analyze 
performance  as  measured  by  metrics  such  as:  the 
percentage  of  nodes  that  become  trusted  correctly  as  a 
function  of  time;  the  number  of  trusted  paths  generated; 
the  probability  of  existence  of  at  least  one  trusted  path 
between  any  two  trusted  nodes;  the  smallest  number  of 
initial  trusted  nodes  that  can  “spread”  trust  correctly  to 
the  entire  network. 
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